Gabster

Gabster

Privacy Policy

This policy explains what personal data we collect on gabster.ai, including the agent setup form, why we collect it, and who processes it with us.

Last updated: 1 November 2026

Who we are

Gabster is operated by GABSTER Technology Company LLC, Riyadh, Kingdom of Saudi Arabia. How to reach us is at the end of this page.

What the setup form collects, and why

  • Your name: to address you and set up your account.
  • Your business name: to name your account and your agent.
  • Your mobile number: to send your confirmation code and your agent’s try link on WhatsApp, and to contact you about the setup.
  • Your email: for your account, for messages about the setup and your subscription, and for your confirmation code if you ask for it by email.
  • Your website or Instagram account, and what you write about your business: to build the first draft of your agent.
  • Your answers (business type, whether your number is on WhatsApp Business, messages per day, how many people answer your customers): to prepare the setup and suggest a plan that fits.
  • While you fill in the form, your entries are kept in your own browser so you don’t lose them if you leave and come back.

The confirmation code

We send a one-time code to your number on WhatsApp, through Meta’s WhatsApp Business platform, or to your email if you ask. The code proves the number is yours and signs you in.

Your account

Sending the form creates a Gabster account for your business. Sign-in is handled by Google’s Firebase Authentication. We also create a customer record at Stripe, our payment provider, for when you choose a plan; no card is asked for at this step.

Building your agent’s first draft

We read the pages of the website you give us, or what you wrote about your business, and use AI providers to write your agent’s instructions and test it with questions. These providers include OpenAI, and, for reading websites, Firecrawl.

We don’t use your data or your customers’ data to train AI models. The providers process it under their API terms for business customers, which don’t use it to train their models.

Payment

If you choose a plan, you pay on Stripe’s pages. We don’t see or store your full card number or security code. Stripe tells us your subscription and payment status.

Trials

If you start a free trial, we check that your business, or the person who runs it, hasn’t had one.

  • What we use: the mobile number and email on your account, a device and browser code, your website domain and, when you connect a channel, your WhatsApp number’s id and your Meta, Instagram, Telegram or TikTok account ids.
  • How we keep it: we turn these into codes using a secret key kept separately, so the stored codes don’t show your number or ids. The codes are still personal data, and we protect them as such. We only create codes when a trial starts or when you connect a channel during one.
  • Why: one trial per business and per person who runs it, and fraud prevention. Never for ads.
  • Automatic check: a match blocks a new trial; on request our team reviews it before the decision is final.
  • Lawful basis: our legitimate interest in preventing fraud and repeat trials. No trial without the check; you can subscribe without one.
  • How long: we keep the codes only as long as the one-trial rule needs them, then delete them.
  • Who sees it: our billing and support team. Stripe holds your trial dates.

Our messages to you

We message you on WhatsApp and by email about your setup, your agent’s try link, your plan, and any session or call you book with our team. If you connect your number to your agent, your customers’ messages and the agent’s replies pass through Meta’s WhatsApp Business platform.

Cookies and analytics

  • On every visit: what the site needs to work (such as your language, and that you closed the cookie notice).
  • We use cookies and similar technology for analytics and ads, for every visitor. The cookie banner is a notice; it has no opt-in or opt-out choice.
  • Usage analytics: we use Microsoft Clarity to understand how our pages are used: recordings of browsing (pages, clicks and scrolling) and page statistics. We don't record what you type into fields.
  • These run in your browser on every visit: Google’s tags (Tag Manager, Analytics and Ads), the TikTok pixel, Microsoft Clarity (recordings and heatmaps of how the page is used), Tolt (a cookie that tracks referrals from our partners) and the Loom video player. The WhatsApp connect panel also loads Meta’s Facebook JS SDK to complete the connection.
  • To protect the form from automated abuse, we may ask your browser to complete a Cloudflare Turnstile check.
  • On the Help Center, the YouTube player (from Google) loads only when you press play on a video, in YouTube’s privacy-enhanced mode.
  • The help chat on the Help Center is Gabster’s own agent, and we store what you type in it to answer you.

Measuring our ads on Meta

  • To know which Facebook or Instagram ad brought each request, our server tells Meta about specific steps: a visit to the setup page, sending the request, trying your agent, opening the payment page, starting a trial or a plan and the first payment, booking a call with our team, connecting WhatsApp, and, on our connector guide, adding Gabster to Claude, copying its address or starting to sign in from it.
  • With each one: your email, number, name and your number’s country, turned into SHA-256 codes before they leave (Meta matches the codes to its accounts and never receives the values themselves), the id of your click on the ad, your IP address and browser type, and an id for your browser that we keep in a cookie named _fbp.
  • Only Meta receives these events from our servers, for every visit and step above, apart from automated (bot) visits, our test pages and test traffic. Google, TikTok, Clarity and Tolt run only in your browser. To stop the sending, email support@gabster.ai and we stop it for your account.
  • Ad measurement: when you sign up, start a trial or subscribe, we send Meta a notice of that step with coded data (your email and phone number in a one-way hashed form) so we can measure how our ads perform. This includes the business details you give during setup (industry, team size, customer type, what you want from chats) and when your agent goes live. We never share your conversations or your customers' data, and you can ask us to stop by contacting us.

Who processes your data with us

We share data only with the companies that provide part of the service to us, and only what they need: Google (sign-in and measurement, and the YouTube player for Help Center videos when you press play), Meta (WhatsApp messages, and ads measurement from our server), Stripe (payments), TikTok (its ads-measurement pixel in your browser), Microsoft (Clarity analytics), Tolt (partner referrals), Cloudflare (the check), and AI and website-reading providers such as OpenAI and Firecrawl. Some of them process data outside Saudi Arabia.

We don’t sell personal data.

Your rights

You can ask to see, correct or delete your personal data, or to stop our marketing messages. Email us at the address below from the email on your account; we may ask you to confirm it’s you. We keep what the law requires us to keep.

Changes to this policy

If we change this policy, we publish the new version on this page.

Contact us

For any question or request about your data:

Our Terms and Conditions.

Start small. Grow when you need to.

From $15 a month. 7 days free. Unlimited conversations on every plan. Enterprise: unlimited agents and projects. Talk to sales See pricing and plans

Present in every conversation.